On 12/09/2026 23:33, Rainer Jung wrote:
Hi there,
I see the following failure in org.apache.tomcat.util.net.TestCrlSupport
when running TC 9 with Java 8, but only for Termurin, Corretto, Zulu and
RedHat JDKs, not for Oracle JDK and not for Java version 11 and later.
I have having trouble running this on the command line (Checkstyle
needed a newer version) but I did see the error on the IDE. I've applied
a patch.
Mark
Testcase: testCrlClient[JSSE with OpenSSL trust false, revoked cert
true, CRL true]
Caused an ERROR
javax.net.ssl.SSLException: readApplicationRecord
at
sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1384)
at
sun.security.ssl.SSLSocketImpl.access$300(SSLSocketImpl.java:73)
at
sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:966)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
at java.io.BufferedInputStream.read1(BufferedInputStream.java:286)
at java.io.BufferedInputStream.read(BufferedInputStream.java:345)
at
sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:745)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:680)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:704)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1612)
at
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1517)
at
java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
at
sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:716)
at
org.apache.catalina.startup.TomcatBaseTest.methodUrl(TomcatBaseTest.java:689)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:683)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:677)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:662)
at
org.apache.catalina.startup.TomcatBaseTest.getUrl(TomcatBaseTest.java:656)
at
org.apache.tomcat.util.net.TestCrlSupport.testCrlClient(TestCrlSupport.java:122)
Suppressed: java.net.SocketException: Broken pipe (Write failed)
at java.net.SocketOutputStream.socketWrite0(Native Method)
at
java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:111)
at
java.net.SocketOutputStream.write(SocketOutputStream.java:155)
at
sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:81)
at
sun.security.ssl.TransportContext.fatal(TransportContext.java:368)
at
sun.security.ssl.TransportContext.fatal(TransportContext.java:275)
at
sun.security.ssl.TransportContext.fatal(TransportContext.java:270)
at
sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1572)
at
sun.security.ssl.SSLSocketImpl.access$400(SSLSocketImpl.java:73)
at
sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:982)
Caused by: java.net.SocketException: Connection reset
at
java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:115)
at java.net.SocketOutputStream.write(SocketOutputStream.java:155)
at
sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:251)
at
sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:89)
at
sun.security.ssl.CertificateVerify$T12CertificateVerifyProducer.produce(CertificateVerify.java:769)
at sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:421)
at
sun.security.ssl.ServerHelloDone$ServerHelloDoneConsumer.consume(ServerHelloDone.java:182)
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)
at
sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)
at
sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
at
sun.security.ssl.TransportContext.dispatch(TransportContext.java:183)
at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)
at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1404)
at
sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1372)
It is always the same test case. Only this one fails. The failure
happened in 21 out of 22 tested combinations, so it is only almost
strictly reproducible.
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
